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Efficiently list-decodable punctured Reed-Muller codes 


Venkatesan Guruswami* Lingfei Jin^ Chaoping Xing^ 


Abstract 

The Reed-Muller (RM) code encoding n-variate degree-d polynomials over for d < q, with 
its evaluation on F”, has relative distance I — d/q and can be list decoded from a 1 — 0{^/d/q) 
fraction of errors. In this work, for d q, we give a length-efficient puncturing of such codes 
which (almost) retains the distance and list decodability properties of the Reed-Muller code, 
but has much better rate. Specificially, when q = we given an explicit rate fl 

puncturing of Reed-Muller codes which have relative distance at least (1 — e) and efficient 
list decoding up to (1 — i/s) error fraction. This almost matches the performance of random 
puncturings which work with the weaker field size requirement q = Q,{d/e^). We can also 
improve the field size requirement to the optimal (up to constant factors) q = Vl{d/e), at the 
expense of a worse list decoding radius of 1 — and rate Vt . 

The first of the above trade-offs is obtained by substituting for the variables functions with 
carefully chosen pole orders from an algebraic function field; this leads to a puncturing for 
which the RM code is a subcode of a certain algebraic-geometric code (which is known to be 
efficiently list decodable). The second trade-off is obtained by concatenating this construction 
with a Reed-Solomon based multiplication friendly pair, and using the list recovery property of 
algebraic-geometric codes. 


1 Introduction 

The Reed-Muller code is one of the oldest and most widely studied code families, with many 
fascinating properties. For a finite held ¥q with q elements, and integers n, d, the Reed-Muller 
code RMq(n,d) encodes polynomials in n-variables of total degree at most d by their evaluations 
at all points in F”. In the case where n = 1, the Reed-Muller code RMq(l,d) is in fact the 
extended Reed-Solomon code. In this paper we focus on the regime where d < q — this case is 
of particular interest in complexity theory, where the local checkability/decodabiliy properties of 
the code (thanks to its restrictions to lines/curves being Reed-Solomon codes) have found many 
applications. In this regime, the Reed-Muller code RMg(n, d) is an Fg-linear code of dimension 
block length q'^, and relative distance 1 — djq. Thus, when d q, the distance property is 
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excellent and any two codewords differ in most of the positions. However, for large n, the rate of 
the code is very small, as ~ n'^ symbols are encoded into codeword symbols. 

The poor rate can be ameliorated, without significant compromise in the distance properties, 
by puncturing of the code. This means that message polynomials are encoded by their values 
at a subset 5 C F” of evaluation points. Standard probabilistic arguments show that if one 
punctures a q-aiy [A?^, K, D] code at N' random positions to obtain an [N', K, D'] code, then D' ~ 
D{N' — K)/{N — K). Thus, if we puncture a Reed-Muller code with D/N = 1 — e/2, down to rate 
ff(e), i.e., K/N' = n(e), then D'/N' ^ 1 — e since K N. Note that this makes the rate n(e) 
which is optimal up to constant factors for a relative distance of 1 — 0(e). Such a subset S used for 
puncturing is called a “dense hitting set” for degree-d polynomials (which means that any non-zero 
polynomial vanishes on at most an e fraction of S). Explicit constructions of hitting sets (and their 
stronger variant, pseudorandom generators) for low-degree polynomials have been well-studied in 
the literature [SollllEllSIlEIllinilll], with recent works achieving both field size and seed length 
optimal up to constant factors m^- 

In other words, when q = fl{d/e), we know explicit puncturings of RMq(n, d) to length poly(n'^/e) 
that have relative distance 1 — e. The motivation in this work is to obtain such length-efficient 
puncturings of an RM code, which in addition have efficient error-correction algorithms. Our goal 
is to correct a constant fraction of worst-case errors, and in fact to list decode an error fraction 
approaching 1 for small e. Our main result is stated below (we achieve two incomparable trade-offs): 

Theorem 1.1. [Informal statement] Let e > he a small constant. There are explicit puncturings 
of RMg(n,d), constructible in deterministic poly(n'^/e) time, that have relative distance at least 
(1 — e) along with the following list-decodability guarantees: 

(i) When q = Q.{d^/e^), the code has rate Ll (^) and can be efficiently list decoded from (1 
fraction of errors; 

(ii) When q = Q{d/e), the code has rate Ll and can be efficiently list decoded from (1 
fraction of errors. 

In both cases the output list size is 0{l/e). 

Note that the advantage of the second result of the above theorem is the smaller field size, 
which is optimal up to constant factors for a relative distance of 1 — e. 

As a comparison to the combinatorial (not efficient) decodability of punctured RM codes, for 
q ^ Il{d/e), a random puncturing of RMg(n, d) of rate n(e) is list-decodable from an error-fraction 
of (1 — ^/e) by virtue of the Johnson bound on list decoding. Our guarantee (i) above matches 
this decoding radius with an efficient algorithm under a quadratically larger field size requirement. 
The guarantee (ii) on the other hand gets the correct field size (for the desired relative distance of 
(1 — e)), but has worse list decoding radius and rate. Specializing a general result of Rudra and 
Wootters [21] on list-decodability of randomly punctured codes to Reed-Muller codes shows that 

most puncturings of RMq(n, d) of rate 12 ( iog5(i/£)logg ) list-decodable from an error-fraction 

(1 — e), provided q ^ Ll{d/e^). Compared to this result, our rate in guarantee (i) and field size in 
guarantee (ii) are better, but both trade-offs in Theorem 11.11 are worse in terms of list decoding 
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radius. Going past the 1 — -^6 error fraction for efficient list decoding of a rate ps e puncturing 
remains a challenging open problem, even for the case of Reed-Solomon codes. 

Efficiently decodable puncturings of Reed-Muller codes were studied in m under the label of 
noisy interpolating sets. The authors of m gave an explicit puncturing to a set of size C^n'^, 
for some constant depending on d, along with an efficient algorithm to correct a exp(—0((i)) 
fraction of errors, which approaches 0 as d increases. Our focus is on the list decoding regime where 
the goal is to correct a large fraction (approaching 1) of errors. 

Approach in brief. We give a brief description of the high level approach behind our two 
constructions claimed in Theorem o The idea behind (i) is to replace each variable Xi, i = 
1,2,... ,n, by a function fi from a suitable algebraic function field K that has Oj poles at a specific 
point Poo and no poles elsewhere. The Oj’s are chosen to belong to a Sidon sequence so that no 
two (multi) subsets of {ai,... ,an} of size at most d have the same sum. This ensures that every 
polynomial of degree d in xi, X 2 ,..., is mapped to a distinct function in K with bounded pole 
order at Poo- The evaluations of the ffis at enough rational points gives the desired puncturing, 
which inherits the distance and list decodability properties from a certain algebraic-geometric code. 
We note that the ideas of replacing variables by functions of a function field was already proposed 
in [HE!, and replacing Xj by x“' for an indeterminate x and a* from a Sidon set was proposed in [3], 
and here we combine these two ideas to prove (i). For the second construction, we concatenate the 
codes from (i) with Reed-Solomon based multiplication friendly codes, and use the list decodability 
of Reed-Solomon codes and the list recoverability of algebraic-geometric codes to list decode the 
concatenated code. The idea to use multiplication friendly codes to reduce the field size in Reed- 
Muller puncturings appeared in the recent works HI [IS]. 

Organization. The paper is organized as follows. In Section 2, list decodability of random punc¬ 
tured Reed-Muller codes is discussed in order to compare with our efficient list decoding of explicit 
punctured Reed-Muller codes. Some results on Sidon sequences are presented in Section 3 for the 
sake of construction of our explicit punctured Reed-Muller codes. Preliminaries on function fields 
and algebraic geometry codes are included in Section 4. In Section 5, we introduce multiplicative 
friendly pairs in order to concatenate our punctured Reed-Muller codes over larger fields. Section 
6 is devoted to explicit constructions punctured Reed-Muller codes. The main results on efficient 
list decodability of our explicit punctured Reed-Muller codes are presented in Section 7. 


2 List decodability of random punctured Reed-Muller codes 

Throughout, we denote by X the variable vector (xi, X 2 ,..., x^). Thus, the multivariate polynomial 
ring Fq[xi,... ,Xn] is denoted by FgfA]. A polynomial F{X) of Fq[A] can be written as F{X) = 
ajX^ for some aj G Fg, where I = {ii,i 2 , ■ ■ ■, in) £ denotes x^^x^^ • • • xj^-. 

For n, d, q with d < q, define the Reed-Muller code 

RMg(n,d) := {(F(u))ueFj : F G Fg[A], deg(F) ^ d}. 

The code RMg(n, d) has length q'^ and dimension 

A set is called a multiset if elements in this set could be repeated. For a multiset T = 
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{ui, U 2 ,..., uat} in F”, denote by RMq(n, d)\'Y the Fg-linear code 

RM,(n,d)|r :={(F(ui),F(u2),...,F(u^)) : F G FJX], deg(F) ^ d}. 

It is called a punctured Reed-Muller code. Note that our punctured Reed-Muller code is slightly 
different from the notion of usual punctured codes where elements in the set T are not repeated. 

Definition 1. A code C QTA is said to be {p,L)-list decodable if for every y G S”, the number of 
codewords of C which are within Hamming distance pn from y is at most L. 


To compare our explicit constructions with non-constructive puncturings of Reed-Muller codes, 
we state the following result that can be easily derived from Corollary 2 in Sec. 4.1 of 


Proposition 2.1. 1. Whenq ^ n(d/e^), there is a puncturing o/RMq(n,d) ofrateQ 

that is (1 — £,0{l/e))-list decodable. 


log®(l/e)logg 


2. When q ^ Q{d/e), there is a puncturing of RMg{n, d) of rate Q{£) that is {1 —^/£,0{!/£))-list 
decodable. 


3 Sidon sequences 

The notion of Sidon sequences was introduced by Simon Sidon to study Fourier series and later 
it became a well-known combinatorial problem and found many applications There is an 

efficient construction of Sidon sequences given in [4]. In this section, we slightly improve the sizes of 
the elements in the Sidon sequences [3] for the purpose of our application to efficient construction 
of punctured Reed-Muller codes. 

For a nonnegative integer vector / = (fi, Z 2 , • ■ ■, *n) £ denote by wt(/) the sum H- 

Definition 2. For an integer d 2, a sequence of nonnegative integers is called d- 

Sidon sequence if, for any two distinct vectors I = {ii,i 2 ,... ,in), J = (ji, j 2 , ■ ■ ■, jn) £ 
max{wt(/),wt(J)} ^ d, one has Ylk=iHak / 

For most applications, we need the largest number in a Sidon sequence to be as small as possible. 
However, for our purpose, we also want a lower bound on the smallest number in the Sidon sequence. 
This can be ensured using the following lemma. 

Lemma 3.1. If {ai}f=i is a d-Sidon sequence, then for any M > maxi^j^„{ai}, the sequence 
{oi + dM}'^^^ is also a d-Sidon sequence. 

Proof. Consider two distinct vectors I = {ii,i 2 ,... ,in), J = (jij J 2 , • • • ,jn) £ with 

max{wt(/), wt(J)} ^ d . 


If wt(/) = wt(J), then 

n n n n 

'^ik{ak + dM) = '^ikUk + wi{I)dM '^jkO.k +^i{J)dM = '^jkiak + dM). 

k=l k=l k=l k=l 
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If wt(/) 7 ^ wt(J), we may assume that wt(/) < wt(J). Then 

n n 

+ dM) = '^^jkO-k + wt{J)dM ^ wt{J)dM ^ dM + wt{I)dM 

k=l k=l 

n n 

> +wt(/)(iM = E ik{ak + dM). 

k=l k=l 

This completes the proof. □ 

An efficient construction of Sidon sequences was proposed in [H Lemma 59] based on finite 
fields and discrete logarithm. The largest number in the Sidon sequence given in [U Lemma 59] is 
upper bounded by +0(n‘^). If we apply this upper bound to our construction, one would get a 
punctured Reed-Muller code with rate zero (see Section [ 6 ]). Therefore, we modify the construction 
of Sidon sequences in [H Lemma 59] as below. 

Lemma 3.2. For arbitrary positive integers d and n, a d-Sidon sequence with 

max Oj ^ + 0(n^~^) 

can be deterministically constructed in time. 

Proof. Let p be the smallest prime satisfying p ^ n. Then we have p = n + 0(n^'^^^) (see [I]). 
Put M := (p'^+^ — l)/(p — 1). Then M = + 0{n^~^). Let ai, ... ,a„ be n distinct elements 

of ¥p. One can find a primitive element 7 of F^d+i in time 0{p'^^‘^) = 0(n'^/^) (see |26( Section 
11.1]). For each i, find the discrete logarithm li < — 1 such that 7 + a* = 7 ^' G F^d+i in 

time 0(p'^^'^~^^) = (see |26l Section 11.2]). Write £i = tM + q for some integer Ci with 

0 ^ Ci < M. Hence, we have 7 + a* = / 3 i 7 '^S where /3j = ( 7 ^)* G F*. We claim that {ci,... ,Cn} 
is a d-Sidon sequence. Indeed, suppose that there were two distinct vectors I = {ii,i 2 , ■ ■ ■, in), J = 
■ ■ ■ ,jn) G with max{wt(/), wt(J)} ^ d such that 4cfc = dfcCfc- Then we have 
-yEfc=i*feCfc _ ^Efc=iJfcCfc^ nfc=i(7 + OikT^ = /5nfc=i(7 + some [3 G F*. This implies 

that 7 is a root of nonzero polynomial 0^=1 + otkY^ — (3 0^=1 + cy-kV^ of degree less than d-|- 1. 

This contradiction implies that {ci,..., c^} is a d-Sidon sequence. □ 

Combining Lemma 13.11 with Lemma 13.21 gives the following efficient construction of Sidon se¬ 
quences in a relatively small interval. 

Corollary 3.3. For arbitrary positive integers d and n, there exists a d-Sidon sequence { 0 *}”^;^ 
satisfying dM ^ a, < (d -|- 1)M for all 1 ^ i ^ n, where M = 0(n'^“^). Furthermore, this 

sequence can be constructed in time 0 (n'^/^+^). 

4 Function fields and algebraic geometry codes 

4.1 Algebraic function fields 

Let us introduce some background on algebraic function fields over finite fields. The reader may 
refer to [28l [Sni |23] for details. 
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Let F be a function field of one variable over Fg, i.e., Fg is algebraically closed in F and -F is a 
finite extension over Fg(x) for any x G F \ Fg. We denote by g{F) the genus of F. In case there 
is no confusion, we simply use g to denote the genus g{F). Denote by A^(F/Fg) the number of 
rational places of F. 

For a place Q of F, we denote by uq the normalized discrete valuation at Q. Denote by Fp the 
set of places of F. A divisor G of F" is a formal snm G = nqQ, where nq are integers and 

almost all nq are eqnal to zero. The degree deg(G) of G is defined by deg(G) = nq deg{Q). 

The snpport of G, denoted by Supp(G), is defined to be the set {Q € Fp '■ nq / 0}. For 

two divisors G = X^Qgp^ nqQ and H = we say that H is less than or equal to 

G, denoted by FT ^ G, if mq ^ nq for all Q G Fp. For a nonzero function x in F, one can 

define a principal divisor (x) := i'q{x)Q. It is a well-known fact that the degree of (x) is 

zero. The zero divisor and pole divisor of x are defined to be (x)o := X^QgPf i^Qi^)>o 
(x)oo ■= -JLqGVF,:^Qix)<o^Qi^)Q^ respectively. 

Now for a divisor G, one can define the Riemann-Roch space C{G) associated with G by 

£(G) := {x G F* : (x) + G ^ 0} U {0}. (1) 

Then the Riemann-Roch Theorem says that C{G) is a finitely dimensional space over Fg and its 
dimension, denoted by f’(G), is lower bounded by 

£(G) ^ deg(G) -5 + 1. (2) 

Furthermore, the equality in ([ 2 |) holds if deg(G) ^ 2g — 1. 

4.2 Algebraic geometry codes 

The books [28l ISOl |23] are standard textbooks for algebraic geometry codes. In this snbsection, we 
briefly introdnce the constrnction of algebraic geometry codes, i.e., Goppa geometric codes. 

Let V = {Pi, P 2 ,..., P/v} be a set of rational places of F and let G be a divisor of F such that 
Supp(G) n P = 0. Define the algebraic geometry code by 

G(P; G) = {(/(Pi), /(P 2 ),..., /(Pw)) : / G CiG)}. (3) 

Then C{V]G) is an Fg-linear code of length N. The dimension of G(P;G) is (.{G) as long as 
deg(G) < N. The minimnm distance of the code is at least N — deg(G) and it is called the 
designed distance of G{T’]G). 


4.3 Garcia-Stichtenoth tower 


There are two optimal Garcia-Stichtenoth towers that are eqnivalent. The reader may refer to 
[mill] for detailed results on the Garcia-Stichtenoth function tower. A low-complexity algorithm 
for the construction of the Riemann-Roch space and algebraic geometry codes based on the tower 
of [ini m] was given in [25] . 


Let r be a prime power. The Garcia-Stichtenoth tower is defined by the following recursive 
equations [l2] 

( 4 ) 


^i+1 + ++1 1 I 1 ’ ^ 1, 2, . . . , f 1. 

Zi + i 
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Put Ft = ¥^ 2 {zi,Z 2 , ... ,zt) ioT 2. 

The function field Ft has at least — r) + 1 rational places. One of these is the “point at 

infinity” which is the unique pole Poo of zi. The genus gt of the function field Ft is given by 

J — 1)2 if f is even 

\ (7’h-l)/2 _ l)(^j..(i+l)/2 _ ]^) j£ ^ jg 

Thus, the genus gt is at most r* — Furthermore, the algebraic geometry codes constructed 
from the Garcia-Stichtenoth tower can be constructed in time cubic in the block length (see |25|b 


5 Multiplication friendly pairs 

Multiplication friendly pairs were first introduced by D.V. Chudnovsky and G.V. Chudnovsky [5] 
to study the complexity of bilinear multiplication algorithms in extension fields. Following their 
work, Shparlinski, Tsfasman and Vladu^ m systematically studied this idea and extended the 
result in [5] . Recently, multiplication friendly pairs were used to study multiplicative secret sharing 
[ 6 ] and punctured Reed-Muller codes (or equivalently, hitting sets) [U [18] . 

For d vectors Cj = (ca, 0 * 2 ,..., ctm) G {i = 1,2,..., d), we denote by ci * C 2 * • • • * 

the coordinate-wise product ( 0 *=! Cil) ni=l Ci2, ■ ■ ■ I ni=l Cjm)- In particular, we denote by c*'^ the 
vector (cf, • • • , c^) if c = (ci,..., c„). 

For an Fg-linear code C, we denote by the linear code 

Spanjci * C 2 * • • • * Crf : ci, C 2 ,..., G G}. 

Definition 3. For m ^ k, a pair (tt, V’) is called a {d, k, m)q-multiplication friendly pair if vr is an 
¥q-linear map from ¥gk to F™ and ^|J is an ¥g-linear map from F™ to ¥^k such that 7r(l) = (!,...,!) 
and 'if{7r{ai) * ■ ■ ■ * iT{ad)) = ai ■ ■ ■ a^, for all at G F^fe. A (2, k, m)q-multiplication friendly pair is 
also called a bilinear multiplication friendly pair. 

The following two lemmas can be found in mm- 
Lemma 5.1. If (tt,-;/’) is a {d, k,m)q-multiplication friendly pair, then vr is injective. 

Proof. Suppose that vr is not injective. Then there exists a nonzero element a G Fg* such that 
7 r(a) = 0. Hence 0 = V’(O) = 'ilj{Tr{a)*TT(l)*- ••* 7 r(l)) =q:T---T = a, which is a contradiction. □ 

Lemma 5.2. If d,m,k,q satisfy d ^ 2 and d{k — 1) < m ^ q, then a {d,k,m)q-multiplication 
friendly pair (7r,V’) such that ( 7 r(Fgfe))*'^ is a q-ary linear code with minimum distance at least 
m — d{k — 1 ) can he explicitly constructed in polynomial time. 

Proof. Gonsider the polynomial ring Fg[x]. Ghoose an irreducible polynomial Q{x) of degree k and 
identify Fg^ with the residue field Fg[x]/(Q(x)). Let 01 , 02 , • • • ,Om be distinct elements of Fg. 

For a polynomial f{x) G Fg[x], we denote by f{x) (or simply /) to denote the residue of f{x) 
in the residue field Fg[x]/((5(x)). Dehne an Fg-linear map vr from Fgfe = Fg[x]/(Q(x)) to F™ given 
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by 7 r(z) = (z(ai), z(a 2 ), ■ ■ ■ ,z{am)) for an element z G ¥q\x\/{Q{x)) with deg( 2 ;(x)) — 1. This 

is injective since k < m and 7r(l) = (1,1,... , 1). 

Let C be the Reed-Solomon code given by {(/(ai),..., f{oim)) '■ f £ deg(/) ^ d{k — 1)}. 

Since d{k — 1) < m, C is a ( 7 -ary [m, d{k — 1) + 1, m — d{k — l)]-linear code in F™. For a codeword 
c G C, we denote it by cj if c = {f{ai),... Thus, we can define a map if: from C to 

Fqfe = Fq[x]/((5(x)) given by V’(c/) = / G Fq[x]/((5(x)). It is clear that V’ is Fg-linear. Thus, we 
can extend the domain of V' from C to F™ so that it is an Fg-linear map from F™ to Fg*. 

As ( 7 r(Fgfe))*'^ is a subcode of C, it has minimum distance at least m — d{k — 1). 

Finally, we verify the following: for any zi,Z 2 , ■ ■ ■ ,Zd G Vq\x\/{Q{x)) with deg(zj(x)) ^ k — 1 
for 1 ^ i ^ (i, we have 

V^(7r(zi) * • • • * 7r(zrf)) = ^^{{zi • • • Zd){ai), ..., (zi • • • Zd){am)) = = Z 1 Z 2 ■ ■ ■ Zd- 

This completes the proof. □ 


6 Constructions of punctured Reed-Muller codes 

In this section, we propose two constructions of pnnctured Reed-Muller codes. Both the construc¬ 
tions involve algebraic function fields over finite fields. 


6.1 Construction I 


The first construction combines algebraic geometry codes with Sidon sequences. The idea of this 
constrnction is to replace variables Xj in Fg[xi,..., x^] by suitable functions in a function field. 
The idea of replacing variables by functions of a function field was already proposed in mi- 
Furthermore, Sidon sequences were used to construct hitting sets and black box sets for polynomial 
identity testing in [3]. More precisely, in [3], variable Xi is replaced by x“% where is a number 
in the Sidon sequence. In this section, we combine the above two ideas to obtain explicit random 
punctured Reed-Muller codes. 


Lemma 6.1. Given a function field K/Fq with A" -|- 1 distinct rational points Poo, Pi,P 2 , ■ ■ ■, Pn, 
a Sidon sequence {aj}”=i and functions {/i}r=i of K with {fi)oc = aiPoo for all 1 ^ i ^ n, then 
the punctured Reed-Muller code RMg(n, is a subcode of C{P,dLPoo) defined in Section 
as long as maxi,gj,g„ai ^ L, where V = {Pi, P 2 , ■ ■ ■, Pn] and 71 := {{ffiPi),..., fn{Pi)) : i = 
1,2, ...,A}. Thus, RMg(n, d)| 7 ^ has minimum distance at least N — dL. Furthermore, RMq(n,d)\j{ 
has dimension if N > dL. 


Proof. It is easy to see that every codeword of RMg(n, d)\j{ is of the form {F{fi ,..., fn){Pi), ■ ■ ■, 
F{fi, ■ ■ ■, fn){PN)) for a polynomial T(xi,...,x„) G Fg[xi,..., x„]. Let F = ^ 

Fg[A], where = x''f ■ ■ ■ x^". Then F{fi, / 2 , ..., fn) G C{dLPoo)- Our first result follows. 

We consider the pole of Pfi ■ ■ ■ fp. It is easy to see that ''' fP) = X]fc=i Thus, 

^Poo(/r ■ ■ ■ fP) P ^Poo(/i^ ■ ■ ■ /^") long as I p J and max{wt(/), wt(J)} ^ d. This implies that 
F{fi, / 2 , ..., fn) is a nonzero function of C{dLPoo) whenever F{X) is a nonzero polynomial. 




As RMq{n, d)\ji is a subcode of C{V,dLPoo), the minimum distance RMg(n, is at least the 
minimum distance of C{V,dLPoo)- The desired result on the minimum distance of RMg(n, 
follows from the Goppa minimum distance bound for C{V,dLPoo)- 

Since N > dL, the corresponding ■ ■ ■, fn){Pi), ■ ■ ■, F{fi, ■ ■ ■, /n)(-P/v)) is a nonzero vector. 

Therefore, the dimension of RMq(n, remains the same as RM|j(n, d), i.e., Q 

By applying the Garcia-Stichtenoth tower and the Sidon sequnec in Gorollary 13.31 we obtain 
the following result. 

Corollary 6.2. Let q = for a prime power r and let M = Put t = |'log^(dM/2)] 

and N = P{r — 1). Then RMq(n,d)| 7 ^ defined in Lemma \ 6.1\ with the function field Ft in the 
Garcia-Stichtenoth tower is a q-ary [A', N — d{d + l)M]-linear code. 

In particular, if d ^ e(y^—1)/2 —1 for some <e <1, then RMq(n,d)| 7 -^ is a q-ary [A, 
linear code with relative minimum distance at least 1 — s and rate Ll (^). Furthermore, 

one can deterministically construct RMg(n, d)| 7 -j in poly(n'^/e) time. 

Proof. Consider the Garcia-Stichtenoth tower Ft/¥j .2 defined in Section [4.31 with N{Ft) ^ r*(r — 
1) -h 1 and g{Ft) ^ r* - Let Poo, -Pl, P 2 , ■■■,Pn be A -b 1 distinct rational places of Ft. 

Let be the Sidon sequence constructed in Corollary 13.31 Then dM ^ mini^i^„ at ^ 

maxi^i^n Oi < {d + 1)M. 

Put t = [logr(dM/2)]. Then dM 2g{Ft), For each i E [n], by the Riemann-Roch theorem, we 
have i{aiPoo) = Oj + 1 — g{Ft) > (a* — 1) -|- 1 — g{Ft) = I{{ai — l)Poo). Thus, one can find functions 
fi E T((d + l)MPoo) such that vp^{fi) = —at for alH = 1,2,...,n. Thus, the first statement of 
this corollary follows from Lemma l6.11 

By choice of parameters, it is easy to verify that A = 0{n^/e), and the rate follows since ^ 

n'^/dl. Hence, the relative minimum distance of RMg(n, d)| 7 -^ is at least the one of C{'P,d{d + 
l)MPoo) which is bigger than or equal to 1 — d{d + 1)M/A ^ 1 — (d -|- l)/(r — 1) ^ 1 — e. 

The construction of RMg(n,d)| 7 -^ mainly involves: (i) construction of Sidon sequence 
(ii) finding of function ft with np^{fi) = —at] and (hi) evaluation of functions at A points 
Pi, P 2 ,..., Pn- By Lemma [3.21 can be constructed in poly(n'^) time. By Section 

fi with np^{fi) = —at can be constructed in poly(n'^) multiplications in ¥q. Finally, evaluation of 
functions at A points requires poly(A) = poly(n'^/e) multiplications in Fg. Since a multiplication 
in ¥q requires 0 ((logg)^) operations, the desired result follows. □ 

Example 1. In this example, we use the Hermitian function to illustrate our construction as a 
basis of the Riemann-Roch space of the Hermitian function field can be easily expressed. Let d = 2, 
q = 121 and n = 10. Then RMi 2 i( 10 , 2) has rate approximately equal to 9.8 x 10“^^ and relative 
minimum distance 1 — 0.0165 = 0.9835. Consider a d-Sidon sequence 1, 2,4,8,13, 21, 31,45, 66 , 81. 
By Lemma [3Tl the sequence 163,164,166,170,175,183,193, 207, 228, 243 is also a d-Sidon sequence. 
Consider the function field H = Fi 2 i(x, 7 /) defined by y^^ + y = x^‘^- Then the genus 17 of A is 55 
and it has 11^ -b 1 = 1332 rational places. Let Poo be the unique common pole of x and y. Put 
A = 1331. Then the multiset is 

Ti = ,/io(a,^)) : € F 121 , F fi = , 
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where /i = x^y^,f 2 = = x^'^yji = x^^y^J^ = x^y^^Je = x'^y’^J-j = x^^y^Js = 

x^y^,f9 = = x'^^y. Then RMi2i(10,2)|7[ is a 121-ary [1331,66,^ 845]-linear code. 

Thus, this punctured code has rate and relative minimum distance approximately 0.0496 and 
1 — 0.365 = 0.635, respectively. 


6.2 Construction II 


One constraint for the punctured Reed-Muller codes from Construction I is that d is upper bounded 
by 0{ey/q). In this section, we employ the multiplication friendly pairing to concatenate the code 
from Construction I to get d = 0{sq). The idea is to map a vector over ¥g 2 to several vectors over 
Fq through a multiplication friendly pairing. Thus, we obtain a punctured Reed-Muller code over 
¥g from algebraic geometry codes over ¥g 2 . While in Subsection 16.11 the punctured Reed-Muller 
code over Fg is obtained from algebraic geometry codes over Fg. 

Assume that d < q, then by Lemma 15.21 there exists a {d, 2, g)g-multiplication friendly pair 
such that (7r(Fg2))*‘^ has relative minimum distance at least 1 — d/q. Note that the image 
7r(Fg2) is a g-ary [q,2,q — 1] Reed-Solomon code, i.e., vr is an Fg-isomorphism between Fg 2 and a 
g-ary [q, 2]-linear code. For a column vector v = (ui,..., Vn)'^ £ F^j) we obtain an n x q matrix 


7r(v) = 


/ 7r(ui) \ 


\ ttK) / 


Denote by 7rj(v) the Lth column of vr(v) for i = 1,2,... ,q. 

Then we have the following result. 

Lemma 6.3. (see m Theorem III.5]) If there exists a q^-ary extended punctured Reed-Muller 
code RMg 2 {d,n)\ji with parameters [L, ^ L(1 — p)] for some multiset 71 C F^j, then the q- 

ary extended punctured Reed-Muller code RMg(d, n)| 7 ^ has parameters [qL, ^ qL{l—p—d/q)], 

where T 2 is the multiset {7rj(u) : 1 ^ ^ g, u G T}. 


The proof of the above lemma makes use of the multiplication property of the maps vr and ijj. 
Note that as (vr (Fg 2 ))*'^ is a subcode of a q-ary [q,d + l,q — d]-linear code, the relative minimum 

distance of (vr (Fg 2 ))*‘^ is at least 1 — dfq. We refer to [THl Theorem III.5] for the detailed proof of 
the above lemma. 

To define a multiset T 2 , as in Lemma 16.11 one can consider an arbitrary function field over 
Fg2 with certain points. For simplicity, we only consider the Garcia-Stichtenoth tower defined in 
Section 031 for our construction of Ti. 

Corollary 6.4. RMg(n, fi )|75 is a q-ary [A^, (”^^),^ A^(l — 2{d + l)q^/L — d/q)]-linear code with 
length N = qL = q^~^^{q — 1). 

In particular, if d ^ s{q — l)/4 — 1 for some 0 < s < 1, then RMg(n, d)\j '2 ho,s the relative mini¬ 
mum distance at least l — £, and rate ^ D Furthermore, one can deterministically 

construct RMg(n, 7)17^ in poly(n‘^/e) time. 
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Proof. Take q = r and consider the Garcia-Stichtenoth tower Ft/¥q 2 with N{Ft) ^ q^{q — 1) + 1 
and g{Ft) ^ as defined in Section [T3l Let Poo, Pi, P 2 , ■ ■ ■ ,Pl be L + 1 distinct rational 

places of Fi, where L = q^{q — 1). 

Let {ai}^^i be the Sidon sequence constructed in Corollary 13.31 and let M = n'^ + 
be defined in Corollary 13.31 Put t = [logg(dM/2)]. Then as shown in Subsection 16.11 one can 
find functions fi G C{{d + l)MPoo) such that i'p^{fi) = —at for all f = l,2,...,n. Put 72 := 
{7Ti{ifl{Pj),...,fniPj)V) : l^j^LjofF- 

By choice of parameters, we have N = iTil = qL = q^~^^{q — 1) = 0{n '^and the rate is 
also clear since = fl{n'^/d\). As in the proof of Lemma 16.11 we know that F(/i, / 2 ,..., fn) 

is a nonzero function in C{d{d + l)MPoo) as long as F{X) is a nonzero polynomial. Hence, the 
relative minimum distance of RMg 2 (n, is at least the one of C{P,d{d + l)MPoo), where 7i = 
{{fi{Pj),f 2 {Pj), ■ ■ ■,fn{Pj)) : i = 1,2,... ,L} andP = {Pi,P 2 , ■ ■ ■,Pl]- By the minimum distance 
bound of algebraic geometry codes in Section 14.21 the relative minimum distance of C(P,d{d + 
l)MPoo) is least 1 — d{d + 1)M/L ^ 1 — 2{d + l)g*/L. The first statement of this lemma follows 
from Lemma 16.31 

If d ^ e(g'—1)/4—1, then it is easy to verify that l—2{d+l)q^/L—d/q ^ l—2{d+l)/{q—l)+e/2 ^ 
1 — £. The desired result on parameters of RMq(n, d)\'j-^ follows. 

Comparing with construction of RMg(n, (i)| 7 ^ in Corollary 16.21 we need one more step for con¬ 
struction of RMg(n,d)| 7 j, namely concatenating RMg 2 (n,d)| 7 - with 7r(Fg2). This can also be done 
in poly(( 7 ) = poly (d/e) time. The proof is completed. □ 

Example 2. ITe use the same Sidon sequenee and function as in Example d Let 7i be the multiset 
given in Example d By Lemm,a fdTM RMii(10, 2)|7^ is is a 11-ary [14641,66]-linear code with the 
minimum distance at least 14641(1 — 722/1331 — 2/121) = 6457. 


7 List decoding 

As both the constructions of punctured Reed-Muller codes are through concatenation of algebraic 
geometry codes, we need to recall some relevant results on list decodability of algebraic geometry 
codes first. 

7.1 List decoding of Reed-Solomon and algebraic geometry codes 

We begin with an extension of list decoding called list recovery. The notion was implicit in many 
works and was given this name in m- 

Definition 4. Let T, be the code alphabet of size q. A code C C S” is said to be {T,i,L)-list 
recoverable if for every family {5i}/=i of subsets in S with each subset of size at mosti, the number 
of codewords c = (ci,..., Cn) G C for which Ci ^ Si for at most rn positions i is at most L. Note 
that in the case ^ = 1, this is the same as being {T,L)-list decodable. 

Algebraic geometry codes have good list decodability [nms]. By extending the results in [16] 
from list decodability to list recovery in a straightforward way, one obtains the following result. 


11 


Lemma 7.1. For small e > 0 and a positive integer m with m ^ eN, where N = r*(r — 1), 
the algebraic geometry eode C{V,{m + g)Poo) based on the Gareia-Stietenoth tower Ft /¥^2 is 
(1 — \/Ze, recoverable, where g = g{Ft). Furthermore, the decoding complexity is 

a polynomial in length N. 

Next, we recall a certain list decodability property of Reed-Solomon codes (see [291 [E] for 
complete version of list decoding of Reed-Solomon codes). 

Lemma 7.2. For positive integers i,d with 1 ^ i ^ y^2g /{d + 1), a q-ary [q,d + l,q — d] Reed- 
Solomon eode C is {T,i)-list deeodable with r ^ 1 — | ^ |- 

7.2 List decoding RMg(n, d)| 7 -^ 

In this subsection, we consider list decoding of RMq(n,d)| 7 -j in Corollary 16.21 List decoding of 
RMg(n, d)\j{ is straightforward since RMq(n, is a subcode of C{V,d{d -|- 1)MP(X)), where 
C{V, d{d+ l)MPao) is an algebraic geometry code from the function field Ft defined in Section 
The length N of RMq(re, d)| 7 -i is r*(r — 1). Put q = r"^. If d ^ e(v^ “ 1)/^ “ ^ some 0 < e < 1, 
then 

d{d+l)M-g{Ft) ^ 2{d + l) ^ 

N ^ r-1 

By Lemma ITTI RMq(n,fi)| 7 ^ is (1 — y^, 0(i))-list deeodable. In conclusion, we have the following 
result. 

Theorem 7.3. RMg {n,d)\']i is a q-ary [iV, ("')^'^)]-/inear code with relative minimum distance at 
least 1 — e and rate O {§\) ■ Moreover, RMg(n, (i)| 7 -i is {1 —y/e,0{^))-list deeodable and the decoding 
complexity is a polynomial in length N. 


7.3 List decoding RMq{n,d)\r 2 

In this subsection, we consider list decoding of RMg(n,ci)| 7 ^ in Corollary 16.41 

Theorem 7.4. RMg(n, 4)17^ is a q-ary [N, linear eode with relative minimum distanee at 

leastl—e and rate VL . Moreover, RMq{n, d)\-j -2 is ,0{j))-list deeodable and the decoding 

complexity is a polynomial in length N. 


Proof. Let (vr, ?/)) be a (d, 2, g')q-multiphcation friendly pair and put S = (7r(Fq2))*‘^. Then S is a 
subcode of a q-aiy [q,d+l,q — d] Reed-Solomon code. Thus, RMg(n, d )|75 is a code in In fact, 
RMq(n, d)\j -2 is a concatenation of C{P, d{d + l)MPoo) and a q-ary [q,d + l,q — d] Reed-Solomon 
code. More precisely speaking, the inner code is a subcode of a q-aiy [q,d+l,q — d] Reed-Solomon 
code, while the outer code is a subcode of C{V,d{d -|- l)MPoo) over Fq 2 . Since the inner code is 

“ I ^ ^ 5 ^^-list deeodable and the outer code C{P,d{d + l)MPoo) is 
list recoverable, the concatenated code RMq(n,d)| 7 ^ has decoding radius 


r = 





and list size O(^) [H]. Setting i = Q{e we have r = 1 — 


□ 
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